$ rpki-client -vvf repo-rpki.idnic.net/repo/60e4750e-4393-43ec-9ab5-d247bbc07d86/0/A6C7B1CA0B908855EE58F1991CCC95B57C4C8E0D.mft File: A6C7B1CA0B908855EE58F1991CCC95B57C4C8E0D.mft (raw, json) Hash identifier: PX6lotOmVQaqpcqNlPa1yEnGr3/eqy770LZTuLYdPds= Subject key identifier: 93:FE:14:91:16:F8:6F:D4:95:BA:AD:BB:3E:35:C7:B6:08:37:80:0A Authority key identifier: A6:C7:B1:CA:0B:90:88:55:EE:58:F1:99:1C:CC:95:B5:7C:4C:8E:0D Certificate issuer: /CN=A6C7B1CA0B908855EE58F1991CCC95B57C4C8E0D Certificate serial: 2F650BD652EDDC2AE0372D54C1B34C42384CF8A1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A6C7B1CA0B908855EE58F1991CCC95B57C4C8E0D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/60e4750e-4393-43ec-9ab5-d247bbc07d86/0/A6C7B1CA0B908855EE58F1991CCC95B57C4C8E0D.mft Manifest number: 053C Signing time: Wed 25 Mar 2026 16:20:57 +0000 Manifest this update: Wed 25 Mar 2026 16:15:57 +0000 Manifest next update: Sun 29 Mar 2026 03:20:57 +0000 Files and hashes: 1: A6C7B1CA0B908855EE58F1991CCC95B57C4C8E0D.crl (hash: dEAITlTvGL+ssB4J4J9wlPItg8r85o0tnffMSW/aeq4=) 2: 323430353a633563303a666630303a3a2f34302d3438203d3e20313334363534.roa (hash: Q46pxbm+TVjkz99t2lUyFhkKtMbUjt5MtTd3GxK/1m0=) 3: 3130332e3134372e3235342e302f32342d3234203d3e20313334363534.roa (hash: SREiQzAjfVMpOJnEfnQMUDFShy+UOiOi5qWZd3X3Wts=) 4: 323430353a633563303a3a2f33322d3438203d3e20313339393736.roa (hash: 1oSAlGyCAQ5BsCDikGrzZ8Xay1TMu0rXb0E3UWwkSO0=) 5: 3130332e3134372e3235352e302f32342d3234203d3e20313334363534.roa (hash: XIQ/lQWer2x/1W1XBHKNLMW19qN6bWGcY/8CJlO5tmY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/60e4750e-4393-43ec-9ab5-d247bbc07d86/0/A6C7B1CA0B908855EE58F1991CCC95B57C4C8E0D.crl rsync://repo-rpki.idnic.net/repo/60e4750e-4393-43ec-9ab5-d247bbc07d86/0/A6C7B1CA0B908855EE58F1991CCC95B57C4C8E0D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A6C7B1CA0B908855EE58F1991CCC95B57C4C8E0D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 03:20:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:65:0b:d6:52:ed:dc:2a:e0:37:2d:54:c1:b3:4c:42:38:4c:f8:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A6C7B1CA0B908855EE58F1991CCC95B57C4C8E0D Validity Not Before: Mar 25 16:15:57 2026 GMT Not After : Mar 29 03:20:57 2026 GMT Subject: CN=93FE149116F86FD495BAADBB3E35C7B60837800A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:04:59:43:e6:34:63:0f:e7:38:3b:d7:89:57: 89:03:1d:38:d7:b8:0d:65:1f:9e:1b:eb:9c:3f:99: c6:34:be:b8:84:ea:d6:16:da:dc:54:65:18:20:8a: f7:1d:5a:b9:99:00:fa:39:74:b1:c5:d2:da:4b:e8: 82:73:c8:d4:30:dd:68:f5:8b:1a:bf:e9:6d:97:d6: 37:de:63:d0:0d:72:99:7f:8a:6b:cf:c3:0f:0f:de: 44:ea:07:a0:35:c1:04:00:53:9b:e8:7e:fb:c8:23: ee:0b:9a:75:9d:9f:fb:9b:26:87:24:42:0d:03:16: c8:07:3f:76:c2:32:51:2b:56:a3:fe:9e:bd:85:25: 4a:27:f9:0a:6a:12:c2:9d:c6:f8:77:ee:55:38:72: 13:5d:a5:72:70:e9:fa:b1:c5:ea:27:82:24:f3:4f: 5e:ae:fd:29:50:77:60:38:0c:53:49:32:47:c9:e4: ca:a2:59:2f:0f:8b:e6:ca:e2:6b:d3:34:9a:10:56: bd:d7:0a:c1:a6:a4:46:86:90:d6:11:7c:f6:07:09: f9:fa:c5:b4:49:ce:4e:4a:d0:5e:99:6f:04:db:5c: 13:58:ab:42:bc:1e:e2:9f:a7:68:9f:f2:6d:f6:1a: b7:7a:ff:d3:7b:d2:f6:a3:8a:bf:51:58:96:6b:4b: 95:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:FE:14:91:16:F8:6F:D4:95:BA:AD:BB:3E:35:C7:B6:08:37:80:0A X509v3 Authority Key Identifier: keyid:A6:C7:B1:CA:0B:90:88:55:EE:58:F1:99:1C:CC:95:B5:7C:4C:8E:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/60e4750e-4393-43ec-9ab5-d247bbc07d86/0/A6C7B1CA0B908855EE58F1991CCC95B57C4C8E0D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A6C7B1CA0B908855EE58F1991CCC95B57C4C8E0D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/60e4750e-4393-43ec-9ab5-d247bbc07d86/0/A6C7B1CA0B908855EE58F1991CCC95B57C4C8E0D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:f6:5d:6f:8b:c2:bd:53:ed:90:b6:e7:7b:c1:f7:d7:0d:50: 95:ed:10:b7:6f:60:34:46:89:28:70:92:15:cc:3b:70:f8:b5: d2:be:8f:9d:ce:ea:a7:8e:d1:ce:b3:78:cc:d3:93:e8:6a:b2: 28:c0:2f:dc:8b:27:3b:65:83:c1:2e:99:c3:84:82:0b:16:35: 4d:49:f0:e1:00:51:54:7b:58:8d:92:9f:22:3e:ed:94:8a:22: 0f:bf:ae:98:c6:31:a7:ed:de:ef:f2:e5:46:47:ed:4e:2a:6c: c9:82:81:bd:3c:fa:3d:d8:6b:0a:5d:dd:e6:4c:04:59:a5:1f: 44:89:4a:3b:2c:0c:f8:a5:10:98:2a:51:8b:80:81:76:2f:1c: 47:fc:ee:51:20:60:1c:f0:dc:75:b5:09:6f:f3:10:63:48:cf: cf:62:66:2d:cd:d7:d4:45:2e:ee:34:60:ee:d7:a0:f3:06:4f: bd:66:be:4b:56:6d:14:b5:2a:76:43:6e:fe:d3:e4:5c:d0:db: 81:98:0c:8b:58:77:9c:17:23:56:9d:9c:d6:8e:39:68:49:3f: 63:95:7c:1f:1b:97:a7:72:53:e3:0b:7c:08:93:5c:8e:5f:90: fa:f8:9c:04:9c:04:7d:f8:32:ea:ae:af:5e:f9:02:1b:7c:30: 95:df:2b:95 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUL2UL1lLt3CrgNy1UwbNMQjhM+KEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTZDN0IxQ0EwQjkwODg1NUVFNThGMTk5MUNDQzk1QjU3 QzRDOEUwRDAeFw0yNjAzMjUxNjE1NTdaFw0yNjAzMjkwMzIwNTdaMDMxMTAvBgNV BAMTKDkzRkUxNDkxMTZGODZGRDQ5NUJBQURCQjNFMzVDN0I2MDgzNzgwMEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPBFlD5jRjD+c4O9eJV4kDHTjX uA1lH54b65w/mcY0vriE6tYW2txUZRggivcdWrmZAPo5dLHF0tpL6IJzyNQw3Wj1 ixq/6W2X1jfeY9ANcpl/imvPww8P3kTqB6A1wQQAU5vofvvII+4LmnWdn/ubJock Qg0DFsgHP3bCMlErVqP+nr2FJUon+QpqEsKdxvh37lU4chNdpXJw6fqxxeongiTz T16u/SlQd2A4DFNJMkfJ5MqiWS8Pi+bK4mvTNJoQVr3XCsGmpEaGkNYRfPYHCfn6 xbRJzk5K0F6ZbwTbXBNYq0K8HuKfp2if8m32Grd6/9N70vajir9RWJZrS5V5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUk/4UkRb4b9SVuq27PjXHtgg3gAowHwYDVR0j BBgwFoAUpsexyguQiFXuWPGZHMyVtXxMjg0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MGU0NzUwZS00MzkzLTQzZWMtOWFiNS1kMjQ3YmJjMDdkODYvMC9BNkM3QjFDQTBC OTA4ODU1RUU1OEYxOTkxQ0NDOTVCNTdDNEM4RTBELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTZDN0IxQ0EwQjkwODg1NUVFNThGMTk5MUNDQzk1QjU3QzRD OEUwRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjBlNDc1MGUtNDM5My00M2VjLTlh YjUtZDI0N2JiYzA3ZDg2LzAvQTZDN0IxQ0EwQjkwODg1NUVFNThGMTk5MUNDQzk1 QjU3QzRDOEUwRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADX2XW+Lwr1T7ZC253vB99cNUJXtELdvYDRG iShwkhXMO3D4tdK+j53O6qeO0c6zeMzTk+hqsijAL9yLJztlg8EumcOEggsWNU1J 8OEAUVR7WI2SnyI+7ZSKIg+/rpjGMaft3u/y5UZH7U4qbMmCgb08+j3Yawpd3eZM BFmlH0SJSjssDPilEJgqUYuAgXYvHEf87lEgYBzw3HW1CW/zEGNIz89iZi3N19RF Lu40YO7XoPMGT71mvktWbRS1KnZDbv7T5FzQ24GYDItYd5wXI1adnNaOOWhJP2OV fB8bl6dyU+MLfAiTXI5fkPr4nAScBH34Muqur175Aht8MJXfK5U= -----END CERTIFICATE-----Generated at Thu Mar 26 13:39:48 2026 by rpki-client